Changelog

Recent updates and improvements across all releases.

v{{VERSION}} - Fleet Management: Unified Device View and a Real Interactive Terminal/File Manager

September 13, 2026

Fleet - A Unified View Across Node Control and Remote Access: the third and final piece of the Remote Access roadmap. A new "Fleet" sidebar view and proxystack fleet CLI group join Node Control's paired-peer registry with Remote Access's device inventory into one view, computed fresh on every call - a paired peer with no matching inventory entry still shows up as its own row, never invisible. Device groups add a single free-text tag for organizing the grid.
A Real Remote Terminal, Opt-In Per Device: proxystack fleet terminal exec and the GUI's Terminal dialog run one real command on a paired peer and return its real stdout/stderr/exit code - request/response only, not a persistent shell, no PTY. Off by default; an operator must explicitly enable it on the target device.
A Real Remote File Manager, Deliberately Unsandboxed: proxystack fleet files list/download/upload/delete and the GUI's Files dialog give real read/write/delete access to a paired peer's filesystem - broad by design, since the whole tier is opt-in and fully audited rather than a second sandboxed automation action wearing a file-manager costume.
Same Authentication, No New Trust Surface: both capabilities reuse Node Control's exact HMAC-signed, nonce-replay-protected channel - an unauthenticated caller gets the identical response whether a peer's flag is on or off, verified by a dedicated test on every new route. Every command and file operation writes to a separate audit log, with a real session-close signal and an honestly-labeled 5-minute idle-timeout inference rather than a fabricated clean exit.
Three Real Bugs Caught by a Whole-Branch Review Before Any of This Shipped: neither of the two independent Node Control HTTP listeners had ever bounded a request body - fixed with a shared incremental reader under a read timeout, so memory used tracks bytes actually received rather than a value an attacker's own header claims. The Fleet tab's "enable" toggle was presented backwards from what it actually grants - following its own on-screen instructions would have handed a remote peer access to the operator's own machine while claiming the opposite. And inferred session-timeout audit records were attributed to whichever peer happened to trigger the idle sweep, not the real owner of the swept session.

v14.21.0 - Node Control and a Self-Hosted Remote Access Manager

September 12, 2026

Node Control - Secure Remote-Execution Between Instances: a new subsystem, living inside the existing Cluster tab, lets one ProxyStack instance safely control another. Pairing uses a one-time code plus HMAC-SHA256-signed, replay-protected requests (nonce cache and timestamp freshness); the permanent signing key is transferred AES-256-GCM-encrypted so nothing that travels over the wire can decrypt it. The action registry is fixed and allowlisted - exactly 7 actions (node status, RustDesk compose status/up/down/restart/logs, security findings), never arbitrary command execution - with RBAC checked on the initiating side and Node Control's own enabled flag checked independently on the receiving side, plus full audit logging on both ends. Live-verified with a real cross-process pairing between this Windows machine and a WSL2 Ubuntu instance over the actual network.
Remote Access Manager - Self-Hosted RustDesk Server: your own private remote-desktop relay, installed and managed entirely through ProxyStack via Docker Compose (dry-run by default, --apply required to actually change anything, pinned to a specific RustDesk image tag rather than latest). A new 6-tab GUI view (Overview, Install, Devices, Clients, Security, Logs) and a full remote CLI command group cover status, install, start/stop/restart, logs, client config, device inventory, ports, backup, and uninstall.
Real Security Center Findings for Remote Access: hbbs/hbbr down, all 5 published ports checked for non-loopback exposure, incomplete configuration, missing Docker/Compose, and a read-only scan for unmanaged remote-access tools (TeamViewer, AnyDesk, RDP, etc.) already running on the machine - wired into both proxystack security scan/center-scan and cross-node Node Control findings requests.
Backed Up Before It's Torn Down: uninstalling Remote Access Manager backs up by default (--no-backup to opt out), using the same reparse-point-safe directory copy adopted after a real symlink-following bug in Secure Project Import (v14.18.0) - proven here against a real NTFS junction, not a mock. A failed Docker teardown no longer silently orphans a still-running relay.
Startup-Cost Bug Caught Before Shipping: the new Remote Access GUI view originally probed Docker/hardware synchronously during construction, so every app launch paid a multi-second cost whether or not the tab was ever opened - fixed so all six tabs load lazily on first real selection, off the UI thread.

v14.20.0 - Approval-Gated AI Agent, Curated Runtime Packs, and Docker/Sites/Apps Version Rollback

September 11, 2026

AI Agent, Now Able to Actually Act (With Approval): the read-only Operator Assistant is joined by an approval-gated AI Agent that can refresh status, run security scans, control AI deployments, create backups, rotate logs, and run health checks - every action gated by RBAC, a high-risk-action refusal list, and strict parameter validation, with a full Approve/History UI so nothing runs without an explicit human decision.
Curated Cloud/Runtime Packs: a small, hand-picked recipe catalog for the AI Runtime Manager - not an open marketplace, no user-uploaded packs, no arbitrary scripts. Two real starter packs ship today (Code Assistant, Private RAG Starter), each installing SHA256-verified prompt templates and a knowledge base; a pack install never auto-downloads a model or starts a server on its own.
Version History and Rollback for Sites and Apps: both now keep a real version history with one-click rollback, matching the same capability Managed Docker Imports already had.
Docker Pro Gets Three New Tabs: Managed Imports, Import Evidence, and Compose Projects (with per-service status and rollback), plus an Auto Build flow and a Builder Diagnostics dialog.
SentinelAI Now Surfaces Real Findings: plaintext API keys, unavailable advanced ML, and runtime version drift are now real, visible Security Center findings instead of an empty list - and the Sentinel API key itself now lives in the encrypted secrets vault.
Broader Project Detection for Secure Import: Go, .NET, Java, Ruby, PHP, Rust, Deno, and Bun projects are now recognized alongside the existing Node.js/Python/Docker support, plus bare-Dockerfile detection and multi-project-archive scanning.
Two Real Security Gaps Closed: the Classic UI's REST API toggle used to start with no API key at all, reachable from the network with zero credentials whenever it was used while elevated - now requires a real key, generated and shared with the Modern UI automatically. Separately, the self-updater is hardened against a ZIP-slip class of path-traversal bug in release archives, and can now update its own binaries going forward instead of silently skipping them forever.
Certificate Renewal, Fixed for Real: issuing or renewing a certificate no longer stops your web server to fight for port 80 - it now validates over the filesystem instead, the same webroot Secure Import's own evidence tooling already uses.

v14.20.0 (continued) - RAG Knowledge Base, CLI Security Surface, and a Read-Only AI Operator Assistant

July 26-28, 2026

RAG Knowledge Base, Now With DOCX: point it at a folder of documents and it ingests, chunks, indexes, and answers questions with citations back to the source file, against your own local model - now with real DOCX support (paragraphs and tables extracted via Microsoft's Open XML SDK) alongside PDF/Markdown/text, no macro execution, no external-link following, and a clear warning whenever a document contains embedded objects it can't safely read.
General CLI Security Center Surface: proxystack security providers/center-scan/center-findings covers every provider that can honestly run headless from the CLI - AI Runtime, Local Exposure, WAF, and SentinelAI - while being upfront about the six that stay GUI-only rather than faking coverage for them.
A Read-Only AI Operator Assistant: proxystack ai assistant ask/context plus a new "Operator Assistant" GUI tab - ask plain-language questions about your sites, apps, AI deployments, and security findings and get an answer with visible sources. It is architecturally incapable of taking an action: no writes, no shell execution, no restarts, no config changes, no secret reveal, ever. Every question runs through deterministic (non-LLM) tool selection rather than native function-calling, since the local models this runs against can be as small as 0.5B parameters and function-calling isn't reliable at that size - the LLM only ever synthesizes an answer from facts already retrieved and already redacted.
Redaction Runs Three Times: every individual tool result, the combined context handed to the model, and the model's own final answer all pass through the same secret-redaction pass (API keys, tokens, passwords, private keys, license keys, connection strings) - defense in depth, not a single point of failure.
Two Real Bugs Found and Fixed While Building It: a tool labeled read-only could have silently auto-provisioned a brand-new background process and a brand-new secret if asked the wrong question about a knowledge base whose embedding backend wasn't already running - closed by mirroring the exact liveness check the real code path uses and refusing instead. Separately, a genuine caller-driven cancellation (e.g. Ctrl+C) was being swallowed and misreported as a content refusal rather than propagating - fixed to distinguish it from an internal timeout. Both live-verified. 261/261 automated tests pass.

v14.19.0 (continued) - AI Runtime Manager: Local LLM Hosting, First-Class

July 24-25, 2026 (same version, no bump)

Run Local LLMs Like Any Other Deployment: a new AI Runtime Manager scans your hardware (CPU/RAM/GPU/disk), recommends models that will actually run well on it, detects or installs llama.cpp/Ollama, downloads a hash-verified model, and starts a real local OpenAI-compatible endpoint - managed with Start/Stop/Restart, health checks, logs, and an API key, the same way Sites and Apps already are. Available in the GUI's new "AI Runtime" view and via proxystack ai ... in the CLI, on Windows and Linux (real end-to-end WSL2 Ubuntu verification, including a real NVIDIA GPU detected through nvidia-smi passthrough).
11 Curated, Hash-Verified Models: from TinyLlama 1.1B up through Phi-4 14B, spanning tiny/small/coder/mid/large tiers - every SHA256 confirmed against the real Hugging Face file, not trusted from a listing. Deliberately a small hand-picked catalog, not open Hugging Face browsing.
Ollama Support Too: if you already run Ollama, ProxyStack detects it and can list, pull, and unload its models directly - no separate tool needed.
Security Center Now Watches It: a new provider flags real misconfiguration - a server bound to every network interface instead of just localhost, an API key that isn't actually being enforced (checked with a real live probe, not just "is a key configured"), a deployment marked running whose process actually died, oversized logs, orphaned duplicate processes, and more - each with an explanation and a concrete fix, the same way every other Security Center finding works.
A Real, Previously-Unenforced API Key, Found and Fixed: the generated API key was stored and shown in the UI and sent by every client, but the server was reading the wrong environment variable and never actually checked it - anyone who could reach the port could call it with no authentication at all. Fixed and live-verified: a request with no key now gets a real 401.
Two Real Release-Packaging Bugs Caught Before Shipping: the Windows build was quietly shipping a broken placeholder copy of a system library that made hardware detection report 0MB of RAM on a fresh install, and the model catalog file itself was never being included in either download package. Both found by testing the actual release ZIP, not just the development build, and both fixed.

v14.19.0 (continued) - RBAC, Plugin Marketplace Proof, and a Real Production Incident Postmortem

July 21-24, 2026 (same version, no bump)

RBAC Gates Expanded: opt-in role-based access control now also covers Docker, managed Compose/DockerPro, plugin install/toggle/remove, Zero Trust removal, certificate generation/import/Let's Encrypt, and process-reputation enforcement/auto-detonation - not just the handful of call sites it started with.
Plugin Marketplace Gets Real Proof: the hosted marketplace now shows visible hash/size columns and ships a standalone verifier script, so a SHA256-verified install is something you can independently check, not just a claim in the UI.
Local Network Exposure Scanner: a new Security Center provider promotes the old Classic-UI-only port scanner into a real, always-on check - flags any TCP listener bound to a non-loopback interface that isn't one of ProxyStack's own managed ports, with process name and PID attached. Live-verified against a real machine: correctly found 13 genuinely unmanaged listeners while correctly excluding Nginx's own ports, Docker-published ports, and already-configured managed App ports.
Secure Import Gets Static Analysis: Python imports are now also scanned with Bandit (only if you already have it installed - never auto-installed) and folded into the same risk evidence as the existing behavioral sandbox. Verified against a synthetic reproduction of a real bug found the same day in an unrelated project: a hardcoded Flask session secret, debug=True, and a bind-all-interfaces host - exactly the class of issue a behavior-only sandbox would never catch.
Security Review Found and Fixed Two Real Gaps: the CLI's remote serve command had zero authentication on its mesh-join/promote/config-sync endpoints - any client that could reach the port could make the target machine join an attacker-controlled VPN mesh or overwrite its own config, with no credentials at all. Now gated by a constant-time API key check, fail-closed by default. Separately, the Classic UI's REST API toggle displayed a hardcoded "loopback-only" status while actually binding all interfaces key-less - fixed to generate/reuse a real key and show the real reachability state.
A Broader Hardening Audit Followed: the in-app updater now rejects ZIP-slip-style path traversal even after checksum verification; plugin installs validate that slugs and entry paths can't escape the plugin folder; the live License API moved portal passwords to PBKDF2-SHA256, restricted CORS and self-update downloads to HTTPS from our own domain, and removed a public fallback signing secret. SentinelAI API keys moved out of plaintext config and into the encrypted Secrets Vault.
A Real Production Incident, Diagnosed Live: a running instance was found pegging ~9 CPU cores continuously with 1,253 threads and climbing. Root cause: a 60-second timer with no re-entrancy guard, scanning two access logs that had grown past 200MB and 600MB - each overlapping scan pass spawned new threads that never got cleaned up. Fixed with a re-entrancy guard and a per-tick read cap, then followed up with the same guard applied to every other recurring timer in the app, real log rotation (which uncovered and fixed a genuine Windows-Nginx file-handle quirk along the way), and orphan cleanup for the VM sandbox tier at both startup and shutdown.
Solved a Long-Standing Mystery: a customer had a standing habit of always stopping Nginx before closing the app, otherwise it "seemed to crash." Pulled the actual Windows crash record instead of guessing - a real ObjectDisposedException from a background update callback racing the app's own shutdown. Fixed with a defensive invoke helper across every affected call site, verified with a harness that reproduces the exact race before confirming the fix stops it. Confirmed live: closing the app via the title-bar X with no manual workaround, no crash.

v14.19.0 - Secure Project Import: Competitive Expansion

July 20, 2026

Ten More Stacks Recognized: after reviewing how "drop a ZIP, any language" competitor Jade Hosting positions itself, detection now covers Bun, Go, .NET, Java, Ruby (Rails-aware), PHP (Laravel-aware), Rust, and Deno, plus a raw Dockerfile as a broad fallback - builds the image, runs it detached, reads its EXPOSE for the container port, and picks a free host port automatically.
Docker Compose Becomes Managed, Not One-Shot: imported Compose projects now get their own tab with persisted project records, service/image/port summaries, start/stop/restart/down/logs actions, service status, profile/service selection, version history, and rollback. Compose imports also preflight the rendered config and report exact port conflicts before ever calling up.
Auto Build Is Operator-Reviewed: Railpack/Nixpacks Auto Build now shows a build-plan preview with runtime confidence, image/container names, port mapping, env keys from .env.example, exact build/run commands, and listen-probe behavior. If a container starts but does not listen, ProxyStack shows logs plus likely fixes.
More Real GitHub ZIP Proof: round-2 corpus testing covered Phoenix/Elixir, Laravel, Next.js server-mode Docker, Rust Dockerfile, Go Compose, Rails, Spring Boot monorepo, and Rust/Axum app repos with controlled dry-run results.
Frontend Projects Can Deploy as a Static Site: a detected React/Vite/etc. build now offers building from a disposable copy and hosting the output as a Site, instead of only ever running as a long-lived App process.
Real Bugs Found Dogfooding This: generated Flask/Django/Vite commands could bind the wrong port when ProxyStack picked a different free one to avoid a collision - fixed with a real PORT environment variable. A dropped Compose project's nested compose file was detected correctly but still triggered the manual file picker - fixed to use it directly. A shared refresh flag could hide a successful Compose Up from the container list - fixed.
Also Fixed - Live SSL Renewal Incident: a stale provider certificate paired with a renewed private key took brainlock.bygheart.com's Nginx down entirely, and five more sites showed untrusted-certificate warnings from stale fullchain files despite fresh Let's Encrypt files already on disk. Certificate renewal now always updates a site's cert/key/chain mapping to the matching set together, and Let's Encrypt renewal no longer needs to stop Nginx or request elevation to bind port 80.

v14.18.0 - Secure Project Import: Sandboxed Drag-and-Drop Deploy

July 20, 2026

Drag a .zip or .7z Project Onto the Dashboard or Apps View: ProxyStack extracts it, normalizes single-wrapping-folder archives (the shape every GitHub "Download ZIP" export produces), and detects whether it's a static site, Node.js, Python, or Docker Compose project.
Two-Phase Sandbox Dry-Run for Node.js/Python: install/build (network open) then a stricter runtime smoke test, both against a disposable copy - the real extracted folder is never what gets executed. Full behavioral telemetry (child processes, file writes, registry persistence, scheduled tasks, network connections) is captured and classified, not filtered - expected package-manager noise is recorded and zero-scored, never dropped from the record.
Prefilled, Never Auto-Started: opens the existing Add Site/Add App dialog with a risk banner showing the score and which sandbox tier ran - nothing is saved, started, or set to autostart without an explicit Save. Docker Compose projects open the Docker view with the compose file preselected instead.
Full Evidence Log: every import - including unrecognized types and failed extractions - writes a permanent record to logs/deploy-imports.jsonl with the archive hash, detected type, sandbox score, and every individual observation from both phases.

v14.17.7 - Critical Fixes: Checksum Mismatch, Apache Crashes, and PostgreSQL Reliability

July 9, 2026 (updated same day, no version bump)

The In-App Updater's Checksum Check Was Comparing Against the Wrong Value: a copy-paste mix-up meant the update manifest's checksum fields held the wrong kind of hash entirely, so every single download failed with "Checksum mismatch! Download may be corrupted" regardless of whether the download was actually fine. Fixed to the real, freshly-verified value.
Apache Hit the Same Missing-Runtime Crash PostgreSQL Did: a real update attempt surfaced that httpd.exe and openssl.exe were crashing with the identical error the PostgreSQL fix below was written for. Fixed the same way, plus a standing safeguard so it can't silently reopen for Apache specifically.
A PostgreSQL Status Check Could Itself Crash Into an Error: if a quick status check took slightly too long to respond, the app displayed a raw internal error message instead of a clean "not responding" status. Fixed.
Original Fix, Included Below: bundled PostgreSQL was crashing repeatedly on fresh installs with a missing Visual C++ runtime file, and portal.html was showing literal placeholder text instead of the real version number.

v14.17.6 - Real In-App Support, Newsletter, and a Site-Wide Support Link

July 9, 2026

Contact Support From Inside the App: Settings now has a real Support section that files an actual ticket - previously the only way was the website.
Support Link Added Site-Wide: it previously only existed on two obscure legal pages.
Real Newsletter Compose-and-Send: we can now actually write and send an update to subscribers, which surfaced and fixed a real email-delivery bug along the way (a mismatched connection type that could hang instead of failing cleanly).

v14.17.5 - Critical Fix: Fresh Installs Crashed on First Launch, Every Time

July 9, 2026

A Customer's Clean-VM Test Hit a Fatal Crash on Every Launch: reproduced by extracting the actual shipped ZIP into total isolation - the release packaging had only ever copied part of what .NET needs for one specific system-info component, missing a required subfolder on every release. Invisible to our own testing since we'd always tested from the full build output, never the exact narrowly-packaged ZIP a real customer downloads.
Fixed and Re-Verified the Same Way the Bug Was Found: a fresh isolated extraction now launches correctly.

v14.17.4 - Deactivate Now Actually Tells the License Server

July 9, 2026

Deactivate Only Ever Reset Local State: it never told the license server to unbind this machine's hardware ID, the whole point of deactivating so a key can move to a different machine. Fixed to call the real endpoint first, requiring an internet connection so you're never told a license is freed up when it isn't.
Added a Way to Actually Go Buy a License From Inside the App: a "View Plans & Pricing" link on the License panel - previously there was no path there at all despite "Upgrade to unlock" messaging on locked features.

v14.17.3 - Dashboard License Panel Layout Fix

July 9, 2026

User-Reported via Screenshot: the License panel's "Refresh" button was clipped to a 5px sliver by the panel's own edge. Widened the panel to fit.

v14.17.2 - A Live Production 403, Traced to a Chrome Version Number Coincidence

July 9, 2026

Roughly 1 in 10 Chrome Visitors Were Being Silently Blocked: the WAF's built-in SSRF rule matched the substring "0.0.0.0", and modern Chrome's frozen version suffix ("Chrome/150.0.0.0") spells that out whenever the version number ends in 0. Fixed without weakening real SSRF detection; existing installs self-heal automatically.
Closed a CLI Onboarding Gap Found in the Same Investigation: a fresh CLI download had no way to create its own config from nothing, leaving a new user stuck on the first command - now bootstraps automatically, matching how the GUI has always worked.

v14.17.1 - Trust, Polish, and Consistency: 3 More Real Bugs Found Re-Verifying Mesh Join

July 8, 2026

No New Features This Release - On Purpose: we went back and re-verified last release's Windows Cluster mesh-join path against a real second machine instead of moving on, since it had never actually been proven end-to-end before.
The REST API Only Listened on "localhost": confirmed live - even a request from the machine's own real network address was rejected, meaning two genuinely separate ProxyStack installs could never actually talk to each other for Cluster features. Now binds to all network interfaces (with a clear, honest message if that needs a one-time admin step first) and confirmed working with a real cross-machine request.
The Modern Interface Had No Way to Turn the REST API On: only the old classic interface could start it, and even there the setting was never actually saved. Added a real toggle to the modern Security tab that persists correctly and starts automatically on launch.
A Silent Failure Installing the VPN Client: if the one-time VPN client installation step failed because ProxyStack wasn't running as Administrator, it used to report success anyway - the real failure only showed up later, confusingly. Now verified for real, and Windows will properly prompt for admin permission for just that one step instead of requiring the whole app to run elevated.
Two Honest UX Fixes: a "Restore" button that opened a real file picker and then did nothing now points you to the real restore feature that already exists elsewhere. Email alerts that silently failed even when correctly configured in the settings file now actually work.
A Wide Documentation Cleanup: fixed outdated endpoint/view counts, a listed feature (a request "dependency graph") that was never actually built, old branding references, and broken download links across the docs and website.

v14.17.0 - Real Geo-Blocking, Cross-Platform Cluster Mesh Join, and a "Test Sandbox" Diagnostic

July 8, 2026

Geo-Blocking Is Now Real: the Security tab's country-blocking control used to save a setting no config generator ever read. It now downloads and caches real per-country IP range data from ipdeny.com (free, no account needed) and wires it into a genuinely-enforced Nginx rule and Apache deny list.
Cluster Mesh Join Now Works From Linux/macOS Too: previously only the Windows GUI could automatically join a node to the VPN mesh. The cross-platform CLI's proxystack serve command now does too - live-verified end-to-end with a real Linux node joining a real coordinator, independently confirmed online from the coordinator's own records, not just the client's self-report.
Three Real Bugs Found Building That, All Fixed: the underlying VPN client's "join silently" flag doesn't exist on the version in use; the auth-key command flag was spelled wrong in our own code; and the coordinator's own generated configuration only listened on localhost, which would have quietly prevented any node on a separate machine from ever completing setup - a gap that had existed, undetected, since mesh join first shipped.
VM Sandbox Improvements: network-connection detection now watches continuously throughout each detonation instead of only checking once at the end, catching short-lived connections that were previously missed. A new "Test Sandbox" button in Settings checks all 6 setup steps (VirtualBox found, VM found, snapshot found, guest access works, file transfer works, and snapshot restore actually works) in one live run.
Also Added: a real, runnable Security Center demo you can walk through end-to-end, and an honest Proof Status page listing exactly what's been live-verified versus what hasn't.

v14.16.0 - VM-Isolation Sandbox Tier, the Last Roadmap Item

July 8, 2026

Samples Now Run in a Genuinely Separate OS: a new sandbox tier detonates samples inside a customer-provisioned VirtualBox VM instead of on the host at reduced integrity. ProxyStack never bundles, provisions, or licenses the guest OS - you install VirtualBox (free), create your own Windows guest, install Guest Additions, and take a snapshot; ProxyStack only orchestrates it.
Strict Opt-In, Never a New Requirement: a new "tiered" analyzer prefers this stronger tier only once it's actually configured and verified working, silently falling back to the already-proven low-integrity tier otherwise - every existing install keeps working exactly as before.
Two Real Bugs Found and Fixed via Live Testing, Not Assumed: a Windows command-line quoting edge case (a directory path's trailing backslash landing right before a closing quote) was silently corrupting VirtualBox commands and making samples fail to launch with no clear error - fixed by switching to .NET's proper argument-list handling instead of hand-built command strings. Separately, Windows Memory Integrity (a security feature some machines have on), if enabled, silently breaks VirtualBox VM startup entirely - diagnosed and documented as a real setup prerequisite.
Verified Live, Not Assumed Working From Documentation: proved the entire revert cycle for real - deliberately created a file inside the guest, confirmed it was genuinely gone after a full power-off, snapshot-restore, and cold-boot cycle. Ran a real synthetic test file through the whole pipeline and confirmed its child process, file write, and registry change were all correctly detected.

v14.15.0 - ProxyStackVPN: a First-Party-Branded Client, Plus NetBird as a Second Backend

July 7, 2026

ProxyStackVPN Client: the Headscale coordinator was already ours (self-compiled since v14.10.0), but every mesh node still ran the official, unmodified Tailscale client. Self-compiled the open-source Tailscale daemon/CLI (BSD-3-Clause) with the Windows service and network adapter renamed from "Tailscale" to "ProxyStackVPN" - what actually shows in Task Manager, Services, and Network Connections. Zero changes to the working Headscale server side.
NetBird Added as a Second VPN Backend - Client-Only by Design: reading NetBird's actual license file (not just a GitHub summary tag) found its Management/Signal server is AGPL-3.0 - running that as a service for customers could require publishing our own source, so we don't bundle or run it. You run your own NetBird server (self-hosted or NetBird Cloud); ProxyStack connects to it, the same relationship it already has with Docker.
A Real Regression Caught Before Shipping: the Lite edition doesn't bundle the new branded client (matches its existing on-demand-download convention for ClamAV/Headscale), which would have silently broken mesh-join to Lite nodes. Fixed with a fallback to the official Tailscale download specifically for Lite, so it keeps working instead of quietly breaking.
Verified Live, Not Assumed: stood up an isolated test Headscale coordinator and joined a real Tailscale client from a real Linux peer (WSL2 Ubuntu) - confirmed a real assigned mesh IP and online status from both sides, without touching the dev machine's own separate, already-active real VPN connection. This also confirmed a Headscale data-mapping bug that had shipped unverified since v14.10.0 was actually correct all along.

License API - Expired Subscriptions No Longer Break Token Unlocks (server-side, no update needed)

July 7, 2026

A Lapsed Subscription Shouldn't Kill a Separate Purchase: license validation treated an expired subscription the same as a revoked one - rejected immediately, before ever checking whether you'd separately unlocked a feature with tokens. Now a lapsed Pro/Enterprise subscription correctly reverts you to Community while any still-active token-unlocked feature keeps working on its own schedule, since that's a separate purchase you already paid for.
Revoked Stays Strict: an admin-revoked license (fraud/abuse/chargeback) still blocks everything immediately, with no exceptions - this fix only applies to a naturally-lapsed subscription or trial, a different and much lower trust concern.
Closed a Real Security Gap Found While Fixing This: device (HWID) verification now happens before the expiry check instead of after - previously an expired license's HWID was never checked at all, which would have let a leaked or resold expired key be used from any machine to fish for that account's token unlocks. Verified live across all three scenarios (revoked, expired-from-the-right-machine, expired-from-the-wrong-machine) before shipping.
Server-Side Only: no GUI or CLI update needed - this took effect for every existing install automatically.

v14.14.1 - Feature Unlocks Now Work Even Without an Existing License

July 7, 2026

Closed the Last Gap From v14.14.0: a customer who never had any Pro/Enterprise/Trial license had no license_key at all - and the entire entitlement pipeline is keyed by license_key + hwid - so a feature unlock purchased via tokens still couldn't reach their desktop install. This is exactly the audience "unlock just what you need for 5 tokens" is meant for.
Real Fix, Not a Workaround: redeeming a feature unlock now mints a Community-tier "identity anchor" license the first time (no expiry, grants no tier upgrade by itself - only the purchased feature applies), returned in the response so the user knows to activate it in the app.
Verified Live: tested with a fresh test account that had zero license history before the test, confirming the tier correctly stays Community while the purchased feature correctly activates. Test data removed afterward.

v14.14.0 - Token-Purchased Feature Unlocks Now Actually Work

July 7, 2026

Feature Unlocks Went From a No-Op to Real, End to End: the code to apply a token-purchased feature unlock existed on both the server and the GUI, but nothing ever connected them - a customer could spend real tokens, see "Unlocked!", and the desktop app would never reflect it, for any feature, ever. License validation now returns and applies active unlocks, cached locally so they survive restarts.
New "Refresh" Button on the Dashboard: without it, a fresh purchase would still sit invisible in the desktop app for up to 7 days (the normal revalidation interval) even with the fix above.
Security Center Is Now Actually Purchasable: the GUI already checked for it, but the server's purchasable-features list never included it.
"+1wk Trial Extension" Was Also a No-Op: the desktop trial timer is local and device-only with no server link at all - rebuilt to reuse the same license mechanism that already makes the free-month purchases work.
"Cloud Backup" Rebuilt Into a Real Feature: it was sold for tokens with no corresponding gate anywhere - backup was already free and unlimited for everyone. Repurposed into "Scheduled & Automated Backups" with an actual interval timer and automatic retention cleanup, gated for real behind Pro tier or the token unlock.
Verified Live, Not Assumed: tested end to end with a real test license and a real (non-simulated) validation call before shipping; test data removed afterward.

v14.13.1 - Security Center Layout Fix & ClamAV Manual Update

July 7, 2026

Security Center Provider Cards No Longer Overlap/Cut Off: a real rendering bug in the shared status-tile control drew text with no bounding box at all, so longer real strings (provider names, "ActionNeeded") overflowed past the card edge - found via a user screenshot. Fixed to bound and ellipsis-trim text, and widened the card grid to give real content room.
ClamAV Now Has a Manual "Update Signatures Now" Button: previously an "ActionNeeded - run an update" status had no on-demand fix anywhere in the dialog, only an unattended 24-hour background timer. Wired straight to the existing real signature-update call.
Front Page Hero Refreshed: "The Portable DevSecOps Control Plane for Modern Web Apps", reflecting what ProxyStack actually is today - reverse proxy, WAF, Security Center, VPN mesh, and cluster operations - rather than the original "web stack" framing. Meta description, Open Graph, Twitter card, and JSON-LD updated to match.

v14.13.0 - Real Windows Low-Integrity Sandboxing

July 7, 2026

The Sandbox Now Actually Reduces Privilege: a sandboxed sample launches at Windows Low Mandatory Integrity Level - the same core mechanism browser renderer sandboxes and antivirus "Run in Sandbox" features use - confirmed for real via whoami /groups run from inside the sandboxed process itself, not inferred from an API success code.
Two Real Bugs Found and Fixed: the first approach needed Windows privileges this machine's own Administrator account doesn't hold by default (caught live, not assumed); fixed by switching to the technique real low-rights launchers actually use. A second bug in reading a launched process's exit code was also found and fixed.
Front Page Was Missing Security Center Entirely: found by a customer, not a self-audit - the "Sidebar Views" section and several other spots on this very page still said "21 views" and had zero mention of Security Center, five releases after it shipped. Fixed throughout.

v14.12.0 - Automatic Sandbox Detonation

July 6, 2026

Sandbox Detonation Can Now Run Automatically: a new opt-in policy setting means a flagged-but-unresolved process gets a real ~15-second isolated sandbox run automatically, not just via the manual "Detonate" button - folded into the same score and explanation either way.
Verified at Full Strength, Not Just the Honest-Failure Path: the two Process Reputation actions that require Administrator (real-time relaunch blocking, network isolation) were re-tested genuinely elevated - a real firewall rule was added and removed, and a blocked process was auto-killed within seconds of relaunching.
Corrected Windows Home Edition Documentation: Windows Sandbox and Hyper-V's own management tools genuinely require Pro/Enterprise/Education, but the underlying virtualization technology is present on Home edition too (it's what powers WSL2), and third-party tools like VirtualBox work fine there - clarified across the docs.

v14.11.0 - Process Reputation: Real Process Monitoring, Reputation Lookup & Sandbox Analysis

July 6, 2026

Real Process Monitoring: every process launched by your ProxyStack-managed apps (and their children) is hashed and deterministically scored - flags a risky interpreter only when it's an unexpected descendant of your app, not your app's own command, plus known malicious command-line patterns.
Reputation Lookup: a local allowlist/blocklist plus a real VirusTotal hash-only lookup (never uploads a file), cached and rate-limited.
Controlled Sample Submission: uploading a file's actual content to VirusTotal requires an explicit privacy warning and confirmation - hash-only stays the default everywhere else.
Sandbox Detonation: runs a flagged sample in an isolated, network-restricted temp directory to observe real behavior - child processes, file writes, registry persistence, network connections.
Policy Enforcement: Kill, Quarantine, Block re-launch, Isolate network, or Require approval - available manually, with automatic enforcement available once explicitly enabled (default stays Warn-only).

v14.10.0 - Real ClamAV and Headscale VPN

July 6, 2026

ClamAV Is Now Real: the Full edition bundles the official ClamAV Windows build, downloaded and cryptographically verified against Cisco Talos's real signature before it ever shipped. Real signature updates, real scans, real quarantine with restore/remove, real exclusions.
Headscale VPN Mesh, From Scratch: Headscale publishes no official Windows build at all, so this one is compiled from source and runs as a real, opt-in local coordinator (off by default - flip "Enable VPN Mesh" in Settings). Real node listing, real join-key generation, real node removal.
Lite Edition Doesn't Bundle Either, But Doesn't Need To: both ClamAV and Headscale now support a real "Download & Install" from inside the app, the same on-demand pattern Lite already uses for PostgreSQL.
Cluster Can Join a Node to the Mesh: adding a cluster node now offers to join it to the VPN mesh too, installing the Tailscale client on that node if needed.

v14.9.0 - Security Center: A Unified, Provider-Based Security Framework

July 5, 2026

One View for Every Security Signal: a new Security Center aggregates the WAF, SentinelAI, and Cluster health data ProxyStack already produces, alongside new antivirus/VPN providers, into one set of status cards and one unified threat timeline - persisted to a durable event log, not recomputed from scratch on every visit.
Real Microsoft Defender Integration: live status, real-time protection state, quick/full/custom scans, threat history, remediation, and exclusions - all via genuine PowerShell orchestration, not a UI wrapper around nothing. Quarantine listing correctly reports when it needs Administrator privileges instead of silently showing an empty list.
Honest About What's Not Built Yet: ClamAV and Headscale VPN support ship as clearly-labeled detection-only stubs in this release - a real "is it installed" check, and an explicit "not yet implemented" on every action, never a fabricated result. Enterprise tier.

v14.8.0 - Apache Reaches WAF Inline-Blocking Parity

July 5, 2026

Apache Now Actually Blocks Too: config/waf-apache.conf gives Apache the same real inline enforcement Nginx got in v14.7.0, via RewriteCond/RewriteRule - verified against a live sandboxed Apache instance with real requests, not just unit tests.
Two Apache-Specific Escaping Quirks Found and Fixed By Testing, Not Assumed: Apache's RewriteCond doesn't expand "%{...}" inside the pattern the way Nginx expands "$" (confirmed by testing a literal "%{HTTP_HOST}" and watching it match nothing), and there's no working escape for an embedded quote inside a quoted RewriteCond argument - patterns without literal whitespace are left unquoted instead, since Apache treats every character in an unquoted argument literally.
Fixed a Real Encoding Bug Affecting Both Engines: the XXE rule required a literal quote character right after "SYSTEM", but real encoded traffic sends the quote as %22, which neither engine ever decodes. Now matches both forms.

v14.7.1 - Self-Updater Reliability Fixes

July 5, 2026

The Updater Now Actually Stops Nginx: it stopped Apache, PostgreSQL, and other managed processes before applying an update, but Nginx was missing from that list entirely and kept running through the whole process.
Failed Updates No Longer Leave Services Down: if an update failed and rolled back, the updater used to restore the old binaries and simply exit - it never relaunched ProxyStackGUI.exe, which is what actually restarts Nginx/Apache on startup. Both the success and rollback paths now relaunch it.
Truncated Downloads Are Now Detected: a dropped connection partway through downloading a large ZIP could silently produce a corrupted file that only failed later with a cryptic extraction error. The downloaded byte count is now checked against the expected size before the file is trusted.
SHA256 Verification Now Actually Runs: the updater has always supported verifying a ZIP's checksum before extracting it, but the flag that enables it was never passed - closing a narrow gap between the app's own pre-flight check and the updater opening the file.

v14.7.0 - Real WAF Engine: Nginx Now Actually Blocks Requests

July 5, 2026

Real Nginx Inline Blocking: a shared rule engine now backs Nginx config generation, the background log monitor, and a new "Test WAF Rule" tool, so a rule means the same thing everywhere. Enabled Block-mode rules that compile safely are compiled into config/waf-nginx.conf as native if (...) { return 403; } conditions - verified against a live Nginx instance with real requests, not just unit tests.
Apache Stays Detection-Only: by design, not oversight - documented in the WAF view's status banner and the docs.
Runtime Monitor Rewritten: replaces the old detection-only engine, writing structured events to logs/waf-threats.jsonl (was logs/waf.log) with every matched rule, severity, and whether the request was blocked or only detected.
2 New Built-in Rules: Log Injection and HTTP method enforcement (blocks TRACE/TRACK/CONNECT/DEBUG), bringing the total to 14.

v14.6.2 - API Fix + Documentation Accuracy Pass

July 4, 2026

/api/health Field Name Fixed: the health check's checks object used the literal key apache even when Nginx was active, so a Nginx user saw a confusing apache: true. Renamed to webServer, matching /api/status's existing engine-agnostic field.
Documentation Accuracy Pass: fixed a stale "customer portal with JWT auth" claim in the shipped docs (auth is custom HMAC tokens, not JWT), corrected config examples that used field names that don't match the real schema, and fully rewrote the plugin development guide (it described the pre-v14.5.0 fictional plugin system).
Removed Overclaiming Marketing Copy: the FAQ previously said the WAF's threat dashboard "shows real-time blocked requests" - it doesn't block anything, it logs matches from a periodic access-log scan. Removed an unsupported "geo-blocking by country code" feature claim and corrected stale plugin/endpoint counts across the site.
Fixed Widespread Source File Corruption: found and fixed roughly 570 instances of double-mojibake'd characters (em-dashes, checkmarks, box-drawing) in project file headers and CLI console output strings, left over from an earlier encoding mishap.

v14.6.1 - Apache mTLS Parity + Auth Policies + Network Segmentation + Real WAF Detection

July 4, 2026

Apache mTLS Enforcement: v14.6.0 only wired mTLS into the Nginx generator. Apache installs now get the same real enforcement (SSLCACertificateFile/SSLVerifyClient require/SSLVerifyDepth).
Certificate Auth Policies Now Enforced: CN/OU/Issuer/Fingerprint matching is enforced on both Nginx and Apache once mTLS is enabled; SAN Match is Apache-only since stock Nginx has no variable exposing SAN entries. Enforcement is site-wide, not scoped to the policy's Target path.
Network Segmentation Now Enforced: zones become an IP allow-list on both engines. Only Inbound/Both zones are enforced - an Outbound zone describes traffic the server itself initiates, which no request-time access control can restrict.
WAF Threat Log Has a Real Detection Engine: a background scan tails access logs every 60 seconds and matches new requests against the existing 12 rules, so the threat dashboard shows real hits instead of staying empty. Detection and logging only - by the time a request is in the access log it's already been served, so this doesn't block traffic.
Nginx IP Whitelist Bug Fixed: an allow-only list had no trailing "deny all," so Nginx allowed any request that didn't match a rule - a whitelist only added exceptions, it never actually restricted access. Found while extending this code path for network segmentation.

v14.6.0 — Real mTLS Enforcement + Opt-In RBAC

July 4, 2026

Zero Trust mTLS Now Enforced: Enabling mTLS + "Require client certificate" now emits real ssl_client_certificate/ssl_verify_client directives into every HTTPS site (Nginx). Previously this toggle changed nothing about live traffic.
Security Headers Now Enforced: HSTS, X-Frame-Options, X-Content-Type-Options, X-XSS-Protection, and global IP allow/deny lists are now actually applied to generated Nginx configs — previously these settings were saved but silently ignored.
Opt-In RBAC: Team tab gets an "Acting as" selector; once configured, Remove Site/App, Reveal Secret, Deactivate License, and Docker Prune require the Administrator role. Fully backward-compatible — unconfigured installs are never restricted.
Team Tab Bug Fixed: Was writing to the wrong file, so a configured team never satisfied its own compliance check.
Restart Button Fixed: Had a separate code path that skipped plugin hooks and alerts — now consistent with Start/Stop.
Cluster Promotion Now Persists: A promoted node correctly reports its new role afterward instead of reverting to "secondary."

v14.5.2 — Real Alert Monitoring + Rich Discord Embeds

July 4, 2026

Alerts Now Actually Monitor: Settings → Alerts & Notifications (Slack/Discord) previously only fired from the manual Test button. Now wired into Start/Stop/Restart and a 30-second health check that catches an unexpected crash — a deliberate Stop is never treated as a "down" alert.
Restart Button Fixed: Restart had its own separate code path that skipped both the plugin hooks and alerting — it now fires the same events as Start/Stop.
Rich Discord Embeds: Both the built-in alerts and the webhook plugins now post proper Discord embed cards (title, color, fields, footer, timestamp) instead of a single line of text, while remaining fully Slack-compatible from the same webhook URL.

v14.5.1 — 3 More Starter Plugins

July 4, 2026

Brute-Force IP Blocker: Scans the access log every 5 minutes for IPs racking up errors or probing scanner paths and blocks them via Windows Firewall with an auto-expiring rule. Ships in dry-run mode until you opt in.
Config Version History: Auto-commits proxystack.json to a local git repo on every change — free diffable rollback history, no external service required.
Daily Ops Digest: Once a day, posts a Slack/Discord summary of site count, soonest cert expiry, disk space, and recent error rate.
6 starter plugins total now ship with every download, all disabled by default and all listed in the hosted marketplace.

v14.5.0 — Real Plugin Runtime + Hosted Marketplace

July 4, 2026

Plugins Actually Run Now: A plugin.json manifest declares an entry script and which lifecycle hooks it subscribes to — server start/stop, config changes, or a 5-minute scheduler tick. Every run is logged per-plugin with a timeout so one broken plugin can't hang the app.
Hosted Marketplace: Browse and one-click install plugins from proxystack.iamvcholdings.com directly in the Advanced tab — downloads are SHA256-verified against the catalog before install.
3 Starter Plugins Included: Uptime Pinger, Cert Expiry Notifier, and Deploy Webhook Notifier (Slack/Discord) ship in every download, disabled by default.
Version Metadata Fix: Fixed the app's file version property being stuck on an old release number independent of the in-app version.

v14.4.0 — Discord Alerts + SentinelAI Agent Fix

July 4, 2026

Discord Webhooks: Added alongside Slack in Settings — Test Alert now checks both independently.
SentinelAI False Positives Fixed: The agent's process blacklist matched substrings, so short tokens like "nc" flagged legitimate Windows processes (OpenConsole, ExperienceHost, Windows Defender). Detection is now exact-match.

v14.3.9 — REST API Security Hardening

July 4, 2026

API Hardening: Mutating REST API endpoints now always require an API key; header-only auth (no query-string keys); removed wildcard CORS; config sync validates against the real schema and saves atomically with backup.
Real Observability: The Observability view now parses actual nginx access logs instead of showing simulated numbers.
Honest Plugin Panel: Removed a placeholder plugin catalog that didn't install anything real (superseded by the real runtime in v14.5.0).

v14.3.8 — Config Safety + Nginx Process Fix

July 4, 2026

Config Clobber Fixed: Sites/Apps views now reload proxystack.json from disk before every save, so external edits are never silently overwritten. Saves are atomic with rolling backups.
Duplicate Nginx Processes Fixed: Startup script now checks for a running nginx process (not just the port) before spawning, and worker count is capped sensibly on Windows.

v14.3.7 — Windows Agent Launch Fix

May 31, 2026

Windows Agent Tab Fixed: Now launches the bundled compiled agent instead of requiring a Python install.
Vulnerability Scanner: Bundled Trivy binary so container scanning works out of the box.

v14.3.6 — ACME Renewal + Nginx Config Persistence Fix

April 15, 2026

OpenSSL Packaging: Bundled openssl.cnf in release ZIPs for packaged certificate workflows.
Cert Generation: Fixed self-signed certificate generation and renewal handling in packaged installs.
Updater: Updated manifest and website downloads so older installs can detect v14.3.6.

v14.3.3 — Update & Versioning Fixes

March 12, 2026

Version Display: Updated app and website version references to 14.3.3.
Auto-Update: Updated manifest and download links to serve v14.3.3 packages.
Stability: Improved startup reliability and runtime dependency handling.

v14.3.2 — Stability & SSL Fixes

February 22, 2026

CertsView Fix: Fixed UI freeze when running Let's Encrypt/win-acme certificate requests. Stop/Start now runs on background thread.
GameSense API Proxy: Added Nginx config with route splitting between API Proxy (port 8010) and License Server (port 8011).
Sentinel Agent: Added Copy Logs button to copy agent output to clipboard.
Sentinel Agent: Added --no-verify-ssl flag for self-signed certificate environments.
Build Pipeline: Excluded license-api from distribution ZIPs.
Nginx Config: Fixed deprecated http2 directive syntax for newer Nginx versions.

v14.3.1 — UX Polish, Safety Enhancements, Bug Fixes

February 15, 2026

Phase 22.5 — UX Polish & Safety: Comprehensive audit of all 21 GUI views for destructive action safety and usability improvements.
Prune Preview Dialogs: Images, volumes, and networks now show a checklist of items to be removed with Select All/Deselect All and estimated disk space freed. Uncheck items to keep.
Enhanced Remove Confirmations: Container removal shows image, status, running warning, mounted volumes. Image removal checks for dependent containers.
Search Boxes Everywhere: Added search/filter to Images, Volumes, Networks, Sites, Apps, Secrets Vault, and WAF Rules views.
Column Sort: Click any column header in Docker Pro ListViews to sort ascending/descending.
Right-Click Context Menus: Containers (Start/Stop/Restart/Logs/Shell/Inspect/Remove), Images (Run/Inspect/Remove), Volumes and Networks (Inspect/Remove).
Double-Click to Inspect: Double-click any container, image, volume, or network to open JSON inspect dialog.
Sidebar Safety Fixes: ZeroTrust policy/segment removal, Advanced rewrite rule removal, Registry removal, Sites removal (shows SSL/doc root), Apps stop/remove (shows running status and sub-processes) — all now require confirmation.
Log Viewer Search: Find Next with Enter key support and wrap-around within log content.
Certificate Expiry Highlighting: 3-tier color coding — expired (red), ≤14 days (bright red), ≤30 days (yellow), valid (green).
Bug Fix: Fixed .psxt template export crash affecting certain template payload shapes.
Bug Fix: Version display in header now correctly shows current version.

v14.2.1 — Cloud Deploy, Cluster HA, Token Rewards

February 12, 2026

Cloud Deployment (Phase 20): CLI cloud deploy via SSH, cloud status remote health check, cloud setup-script for Ubuntu EC2. Full cloud-init script for automated provisioning.
CLI serve Command: Lightweight API server on port 9090 for remote cluster nodes — enables GUI health checks, config sync, and promotion across cloud instances.
Cluster Auto-Failover: 15s monitoring interval, 3-failure threshold, automatic standby-to-primary promotion with notification.
Blue-Green Deploy: Stage config on standby nodes, health check, swap roles for zero-downtime config rollouts.
Manual Node Promotion: Demote current primaries and promote any node from the GUI Cluster view.
CLI Feature Parity (Phase A.6): 5 new command groups — docker (ps/start/stop/logs/stats/images/compose), security (scan 17 checks, headers audit, SSL audit), backup (create/list/restore), monitor (health check, watch mode), sentinel (agent start/stop, threat viewer)
CLI Phase A.5: CI/CD pipeline (5 targets), .deb/.rpm packaging, shell completions (Bash/Zsh/Fish), template import/export, Let's Encrypt certbot, server install
CLI Phase A: Cross-platform single-binary CLI, now 29 commands with 40+ subcommands across 5 platforms, self-contained .NET 8
SentinelAI Agent v2.0.0 (Phase A.7): Cross-platform security agent — Linux x64 + Windows x64 binaries. 6 monitors (process, network, file integrity, auth log, cron, SSH keys). Auto-connects to SentinelAI dashboard. ML-powered threat detection.
ProxyStack.Core: Shared cross-platform library with config generators, platform abstraction (IPlatformService), models
One-liner Linux install: curl | tar xz && sudo ./install.sh
Token-based referral reward system: earn tokens for signups, conversions, bug reports, reviews
Referral codes auto-generated for all portal users — no approval needed
Token redemption: free Pro/Enterprise months, trial extensions, 30-day feature unlocks
Portal Token Wallet UI: balance, referral link (click to copy), redeem buttons, transaction history
Portal feature unlock panel: browse and unlock individual Pro features à la carte
Admin role system: is_admin flag in JWT token and profile response
Admin token management: grant, deduct, and view system-wide token stats
Feature unlock duration changed from permanent to 30 days (anti-abuse)
Nginx HTTP/2 fix: uses modern http2 on; directive for Nginx 1.25.1+
GUI FeatureGate: token-unlocked features checked via License API at runtime
Settings cleanup: removed duplicate Dark Mode checkbox (theme toggle on navbar)
DB auto-migration: new columns added on API startup without manual SQL

v14.1.0 — Nginx Deep Integration

February 12, 2026

Full Nginx support: IWebServer abstraction lets you toggle between Apache and Nginx in Settings
Nginx config generation: SSL, reverse proxy, WebSocket, SPA fallback, gzip from proxystack.json
Nginx rate limiting, proxy caching, load balancing, stub_status, HTTP/2
Nginx access control: per-site IP allow/deny lists and custom headers
Nginx auto-download, hot-reload, config viewer, log viewer integration

v14.0.0 — Plugin Marketplace & Cluster Management

February 12, 2026

Plugin Marketplace expanded to 20 plugins with descriptions (Auth Provider, Rate Limiter Pro, Geo Blocker, WAF Rules, Metrics Exporter, and 15 more)
REST API v2.0: 17 endpoints — monitoring, plugins, Docker, cluster, config sync, version
Cluster Management: multi-server node management, health checks, config sync to remote nodes
21 sidebar views (added Cluster with Enterprise badge, PostgreSQL, Logs, Settings)
Feature gating audit: Community (free) / Pro / Enterprise tiers properly enforced on all views
Portal authentication: register, login, profile, change password with HMAC-signed tokens
Auto-refresh cluster node status every 30 seconds
System monitoring API: CPU, memory, disk, service status endpoints
Sidebar compact mode: reduced button height for better fit on all screen sizes
Binary hardening improvements + code signing (IAMVC Holdings, LLC certificate)

v11.6.1 — Monetization & Licensing

February 11, 2026

Full Stripe integration: 4 price tiers (Pro/Enterprise × Monthly/Annual)
License API (FastAPI on port 8016): validate, checkout, webhook, admin CRUD
HMAC-signed license keys, PostgreSQL management view, feature gating
Pricing page, customer portal, license-activated page, legal pages

v11.5.0 — Security Suite Complete

February 11, 2026

Zero Trust Security: mTLS, cert auth policies, network segmentation
OWASP Top 10, WAF (12 rules), Security Scanner (18 checks), Secrets Vault
Compliance Reporting: SOC2, GDPR, PCI-DSS, HIPAA (28 controls)

v10.3.0 — App Runner & SSL

February 10, 2026

App Sub-Processes, Let's Encrypt via win-acme, OpenSSL bundled
Auto-update system with SHA256 verification and rollback

Version Archive

Release history. We recommend always using the latest version.

Version	Date	Highlights	Full	Lite
v{{VERSION}} (latest)	Sep 14, 2026	Hardening follow-up. Fixed a real, currently-live install break in the AI Runtime Manager: `LlamaCppInstaller` was fetching a broken GitHub release (llama.cpp now marks every real binary-bearing build as a prerelease, which `/releases/latest` silently excludes), and had zero hash verification on the binary it downloaded and ran - both fixed, live-verified end-to-end with a real ~230MB build. Closed RBAC gaps on the AI Runtime GUI and CLI (Uninstall Pack, Delete Knowledge Base, Stop AI Deployment, Reveal Secret, `ai stop`, `ai packs uninstall`, `deployments rollback`) that had no admin-role check despite this app's established RBAC pattern. Extended a real UI-thread-disposal-race crash fix (previously only on one view) to the Classic UI and 13 other Views/Panels.	Download	Download
v14.22.0	Sep 13, 2026	Fleet Management. The third and final piece of the Remote Access roadmap: a new "Fleet" tab and `fleet` CLI group unify Node Control's paired peers with Remote Access's device inventory into one view, plus device groups. A real, per-peer opt-in interactive terminal and file manager (deliberately unsandboxed, fully audited) ride Node Control's exact same authenticated channel. A whole-branch security review found and closed three real bugs before shipping: neither Node Control HTTP listener had ever bounded a request body, the Fleet tab's enable toggle was presented backwards from what it actually grants, and inferred session-timeout audit records were attributed to the wrong peer. Also fixes a real bug in the read-only AI Operator Assistant's `get_security_findings` tool, where a noisy provider could silently crowd out a higher-severity finding.	Superseded by v14.23.0
v14.21.0	Sep 12, 2026	Node Control and a Self-Hosted Remote Access Manager. Node Control is a new secure remote-execution layer between ProxyStack instances inside the Cluster tab - HMAC-paired mutual authentication, a fixed 7-action allowlist (no arbitrary command execution), two-sided RBAC, and full audit logging, live-verified with a real cross-process pairing over the network. Remote Access Manager is a fully Docker-Compose-managed, self-hosted RustDesk Server with a new 6-tab GUI view, a full `remote` CLI command group, backup-before-uninstall using the same reparse-point-safe copy logic Secure Project Import adopted, and real Security Center findings for port exposure and unmanaged remote-access tools already running on the machine.	Superseded by v14.22.0
v14.20.0	Jul 28, 2026	RAG Knowledge Base, CLI Security Surface, and a Read-Only AI Operator Assistant. A local RAG Knowledge Base (now with DOCX support alongside PDF/Markdown/text) ingests, chunks, indexes, and answers questions with citations back to the source file. A general CLI Security Center surface (`security providers/center-scan/center-findings`) covers every provider that can honestly run headless. And a read-only AI Operator Assistant answers plain-language questions about sites, apps, AI deployments, and security findings with visible sources - architecturally incapable of taking an action (no writes, no shell, no restarts, no secret reveal). Tool selection is deterministic, not LLM-driven, since local models here can be as small as 0.5B parameters. Two real bugs found and fixed while building it, both live-verified. 261/261 automated tests pass.	Superseded by v14.21.0
v14.19.0	Jul 20, 2026	Secure Project Import: competitive expansion. Ten more stacks recognized (Bun, Go, .NET, Java, Ruby, PHP, Rust, Deno, plus Dockerfile as a broad fallback with automatic image build/run). Docker Compose imports become managed, persisted projects with lifecycle actions, service status, profile/service selection, version history, and rollback, with published-port preflight before every up. Frontend builds can deploy as a static Site instead of a long-running process. Auto Build adds a build-plan preview, env-var guidance, and logs/fix guidance when a container does not listen. Also fixes a generated-command port mismatch for Flask/Django/Vite, a Docker Compose file-picker/refresh bug, and a live SSL cert/key mismatch incident. Also adds the AI Runtime Manager (local LLM hosting, 11-model curated catalog).	Superseded by v14.20.0
v14.18.0	Jul 20, 2026	Secure Project Import. Drag a .zip or .7z project onto the Dashboard or Apps view and ProxyStack extracts it, detects what it is (static site, Node.js, Python, or Docker Compose), and - for Node.js/Python - dry-runs it through the existing Process Reputation sandbox in two phases (install/build, then a stricter runtime smoke test) before ever presenting it as trustworthy, always against a disposable copy, never the real extracted folder. Full behavioral telemetry from both phases is captured and classified rather than filtered. Opens the existing Add Site/Add App dialog prefilled with a risk banner; nothing is ever auto-saved or auto-started. Every import writes a full evidence record to logs/deploy-imports.jsonl.	Superseded by v14.19.0
v14.17.7	Jul 9, 2026	Critical fix, updated same day. A real update attempt from v14.17.5 surfaced 3 more real bugs, all now fixed in this same version (no new version number - just a corrected re-release). The in-app updater's checksum check had been comparing against the wrong hash entirely, so every download failed with "Checksum mismatch" regardless of whether it was actually fine - fixed to the real, verified value. The same missing-runtime-file crash PostgreSQL had also affected Apache's httpd.exe and openssl.exe - fixed the same way. And the PostgreSQL status check could itself throw an error if a quick check took slightly too long - now handled gracefully. Also includes the original fix: bundled PostgreSQL was crashing repeatedly on fresh installs with a missing-runtime-file error, and a page was showing literal placeholder text instead of the real version number.	Superseded by v14.18.0
v14.17.6	Jul 9, 2026	Added a real "Contact Support" option inside the app itself (Settings) - previously the only way to file a ticket was the website. Added a Support link to the navbar on every page of the site, not just two obscure legal pages. Built a real way for us to write and send an update to newsletter subscribers, which surfaced and fixed a real email-delivery bug along the way.	Superseded by v14.17.7
v14.17.5	Jul 9, 2026	Critical fix. A customer testing on a genuinely clean VM hit a fatal crash on every launch of a fresh install. Reproduced it by extracting the actual shipped ZIP into total isolation - the release packaging script had only ever copied part of what .NET needs for one specific system-info package, missing a required subfolder on every release. Invisible to our own testing because we'd always tested from the full build output, never the exact narrowly-packaged ZIP a real customer downloads. Fixed, and re-verified the same way the bug was found - a fresh isolated extraction now launches correctly.	Superseded by v14.17.6
v14.17.4	Jul 9, 2026	GUI-only fix, CLI unaffected. Prompted by a user question about what actually happens when you click Deactivate. Found it only ever reset local state - it never told the license server to unbind this machine's hardware ID, which is the whole point of deactivating (so the same key can be used on a different machine). Fixed to call the real endpoint first, requiring an internet connection to do it rather than let you think a license is freed up when it isn't. Also added a "View Plans & Pricing" link to the License panel - previously there was no way to actually go buy a license from inside the app despite "Upgrade to unlock" messaging on locked features.	Superseded by v14.17.5
v14.17.3	Jul 9, 2026	GUI-only fix, CLI unaffected. User-reported via screenshot: the Dashboard's License panel had a "Refresh" button (shown next to Deactivate once a license is active) clipped to a 5px sliver, cut off by the panel's own edge - the panel was 350px wide but the button's right edge sat well beyond it. Widened the panel to fit.	Superseded by v14.17.4
v14.17.2	Jul 9, 2026	A customer reported a real, live 403 Forbidden on two production sites, reachable from one specific device only - not a VM/network issue as first suspected. Root cause: the WAF's built-in SSRF rule blocked on the substring "0.0.0.0", and modern Chrome's frozen browser-version suffix ("Chrome/150.0.0.0") spells that out whenever the version number ends in 0 - silently blocking roughly 1 in 10 Chrome visitors on every install with default WAF rules. Fixed without weakening real SSRF detection (verified live); existing installs self-heal automatically. Also closed a CLI onboarding gap found in the same investigation: a fresh CLI download had no way to create its own config from nothing, leaving a new user stuck on the very first command - now bootstraps automatically, matching how the GUI has always worked on first launch.	Superseded by v14.17.3
v14.17.1	Jul 8, 2026	Trust/polish/consistency pass - no new major features. Re-verifying Cluster mesh join against a real second Windows machine found and fixed 3 more real bugs: the REST API server only listened on "localhost" (rejecting even the machine's own real LAN IP - now fixed and reachable from other machines), the modern GUI had no way to turn the REST API on at all (previously only the old classic interface could), and installing the VPN client silently reported success even when it actually failed for lack of admin rights (now verified for real, with a proper admin-permission prompt). Also fixed a fake "Restore" button that opened a file picker and then did nothing, email alerts that silently failed even when configured correctly, and a wide sweep of outdated documentation and website claims.	Superseded by v14.17.2
v14.17.0	Jul 8, 2026	Real per-country geo-blocking (free ipdeny.com CIDR data, genuinely enforced on Nginx + Apache, replacing a checkbox that did nothing). Cluster VPN mesh join now works from Linux/macOS too, not just the Windows GUI - live-verified with a real node joining a real coordinator. Found and fixed 3 real bugs along the way, including a coordinator config that only listened on localhost. VM Sandbox network detection now watches continuously instead of checking once at the end, and a new "Test Sandbox" button verifies all 6 setup steps in one run. Added a live demo and an honest per-feature Proof Status page.	Superseded by v14.17.1
v14.16.0	Jul 8, 2026	Added the VM-isolation sandbox tier - samples now run inside a genuinely separate OS (a customer-provisioned VirtualBox guest VM), not on the host at reduced integrity. ProxyStack never bundles or licenses the guest OS, only orchestrates it; falls back automatically to the existing low-integrity tier if not configured. Found and fixed two real bugs via live testing: a Windows command-line quoting issue that silently corrupted VirtualBox commands, and Windows Memory Integrity (HVCI) silently breaking VM startup if enabled. Verified live end-to-end including the snapshot-restore revert cycle itself.	Superseded by v14.17.0
v14.15.0	Jul 7, 2026	Added ProxyStackVPN, a first-party-branded client for the existing Headscale mesh (self-compiled from Tailscale's open-source daemon, Windows service/adapter renamed from "Tailscale" - zero changes to the Headscale server itself). Added NetBird as a second, independently-toggleable VPN Mesh backend - client-only by design, since NetBird's own server is AGPL-3.0 licensed; you run your own NetBird server, same relationship ProxyStack already has with Docker. Also live-verified a previously-unconfirmed Headscale node mapping using a real WSL2 Linux peer.	Superseded by v14.16.0
v14.14.1	Jul 7, 2026	Closed the last known gap in the token-unlock fix - a customer who never had any Pro/Enterprise/Trial license had no license_key at all, so a feature unlock purchased via tokens still couldn't reach their desktop install. Redeeming a feature unlock now mints a Community-tier "identity anchor" license the first time (no expiry, grants no tier upgrade by itself), returned so the user knows to activate it. Verified live with a fresh test account that had zero license history before the test.	Superseded by v14.16.0
v14.14.0	Jul 7, 2026	Fixed a real monetization bug - token-purchased feature unlocks (Docker, Plugins, Security Center, etc.) had zero effect on the desktop app for any customer, ever. Fixed end-to-end: license validation now returns and applies active unlocks, with a new Dashboard "Refresh" button so a purchase doesn't sit invisible for up to 7 days. Also fixed: Security Center was missing from the purchasable list; "+1wk Trial Extension" was also a no-op (now server-backed); "Cloud Backup" was sold with no real feature behind it (rebuilt into real Scheduled & Automated Backups with an actual timer and retention cleanup).	Superseded by v14.16.0
v14.13.1	Jul 7, 2026	Fixed Security Center provider cards overlapping/cutting off text (a real rendering bug in the shared status-tile control, found via a user screenshot). Added a manual "Update Signatures Now" button for ClamAV, so an "ActionNeeded - run an update" status has an on-demand fix instead of only an unattended 24-hour background timer. Refreshed the front page hero copy to "The Portable DevSecOps Control Plane for Modern Web Apps", with matching meta/OG/Twitter/JSON-LD updates.	Superseded by v14.16.0
v14.13.0	Jul 7, 2026	Real Windows Low-integrity sandboxing - the sandbox detonation feature now actually launches the sample at Windows Low Mandatory Integrity Level (confirmed via `whoami /groups` from inside it), not just inside a scoped temp directory. Found and fixed two real bugs along the way (a privilege requirement in the first approach, and a .NET Process quirk). Also fixed real front-page gaps: added a missing Security Center card and corrected stale "21 views"/"18 endpoints" text throughout, and filled in missing ClamAV/Headscale FAQ entries.	Superseded by v14.16.0
v14.12.0	Jul 6, 2026	Automatic sandbox detonation for Process Reputation (opt-in) - a flagged-but-unresolved process now gets a real isolated-sandbox run automatically, not just via the manual button. Verified the two Administrator-gated Phase 5 actions (real-time block watcher, network isolation) at full elevated strength. Corrected Windows Home edition virtualization docs (Hyper-V role/Windows Sandbox are blocked, but the underlying hypervisor tech that powers WSL2 isn't, and third-party hypervisors like VirtualBox work fine) and added an honest comparison to AVG CyberCapture.	Superseded by v14.16.0
v14.11.0	Jul 6, 2026	Process Reputation: all 5 phases of the SentinelAI Detonation Engine are real. Real Windows process-tree monitoring with deterministic risk scoring (Phase 1), pluggable hash reputation lookup including VirusTotal (Phase 2), explicitly-gated sample submission with a privacy warning (Phase 3), real isolated-process sandbox detonation (Phase 4), and real policy enforcement - Kill/Quarantine/Block/Isolate-network/Require-approval, manual or fully automatic once explicitly enabled (Phase 5). Detect/warn only by default.	Superseded by v14.16.0
v14.10.0	Jul 6, 2026	ClamAV and Headscale VPN went from honest stubs to real: bundled/PGP-verified ClamAV with real scans/quarantine (Full edition), Headscale compiled from source with an opt-in local VPN mesh coordinator (Full edition). Lite gets both via a real in-app "Download & Install" instead of bundling them. Cluster can join a node to the VPN mesh when adding it.	Superseded by v14.16.0
v14.9.0	Jul 5, 2026	Security Center: a new provider-based framework unifying WAF, SentinelAI, Cluster, and new antivirus/VPN providers into one status view and threat timeline. Real Microsoft Defender integration (scans, remediation, exclusions, live-verified). ClamAV and Headscale VPN shipped as honest detection-only stubs at the time. Enterprise tier.	Superseded by v14.16.0
v14.8.0	Jul 5, 2026	Apache reaches WAF inline-blocking parity with Nginx (config/waf-apache.conf) - verified against a live sandboxed Apache instance. Fixed two real Apache escaping bugs found via live testing and a WAF-009 (XXE) encoding bug affecting both engines.	Superseded by v14.16.0
v14.7.1	Jul 5, 2026	Self-updater reliability fixes: it now actually stops Nginx before applying an update (was missing from the process list entirely), a failed update relaunches the GUI so services come back up instead of staying down, truncated downloads are detected instead of silently corrupting the install, and SHA256 verification is actually invoked.	Superseded by v14.16.0
v14.7.0	Jul 5, 2026	Real WAF engine - Nginx now actually blocks matching requests inline (config/waf-nginx.conf), not just logs them, via a shared rule engine also used by the runtime monitor and a new Test WAF Rule tool. Apache remains detection-only by design. 2 new built-in rules (14 total).	Superseded by v14.16.0
v14.6.2	Jul 4, 2026	Fixed a misleading /api/health field name, ran a full documentation accuracy pass (JWT/HMAC, plugin system rewrite, removed WAF/geo-blocking overclaiming), and fixed a widespread source-file encoding corruption	Superseded by v14.7.0
v14.6.1	Jul 4, 2026	Apache mTLS Parity + Certificate Auth Policies + Network Segmentation + Real WAF Detection - Apache installs get the same mTLS enforcement Nginx got in v14.6.0; auth policies and network segmentation zones are now enforced; WAF threat log now populated by a real access-log detection engine	Superseded by v14.6.2
v14.6.0	Jul 4, 2026	Real mTLS Enforcement + Opt-In RBAC - Zero Trust mTLS and security headers now actually applied to Nginx config; Team tab RBAC enforcement; cluster promotion fix	Superseded by v14.6.1
v14.5.2	Jul 4, 2026	Real Alert Monitoring + Rich Discord Embeds - Settings alerts now actually monitor server state instead of test-only; Restart fires hooks/alerts; rich embed cards	Superseded by v14.6.0
v14.5.1	Jul 4, 2026	3 More Starter Plugins - Brute-Force IP Blocker, Config Version History (git-backed), Daily Ops Digest; 6 starter plugins total	Superseded by v14.6.0
v14.5.0	Jul 4, 2026	Real Plugin Runtime + Hosted Marketplace - plugins execute on real lifecycle hooks, SHA256-verified one-click install, 3 bundled starter plugins	Superseded by v14.6.0
v14.4.0	Jul 4, 2026	Discord Alerts + SentinelAI Agent Fix - Discord webhooks alongside Slack, fixed agent false positives on legitimate Windows processes	Superseded by v14.6.0
v14.3.9	Jul 4, 2026	REST API Security Hardening - mandatory API keys on mutating endpoints, real observability metrics, removed placeholder plugin catalog	Superseded by v14.6.0
v14.3.8	Jul 4, 2026	Config Safety + Nginx Process Fix - fixed config clobbering and duplicate nginx processes	Superseded by v14.6.0
v14.3.7	May 31, 2026	Windows Agent Launch Fix - bundled agent launches without requiring Python, Trivy scanner included	Superseded by v14.6.0
v14.3.6	Apr 15, 2026	Certificate Packaging Fix - bundled OpenSSL config, fixed packaged cert generation, updater metadata refresh	Superseded by v14.6.0
v14.3.3	Mar 12, 2026	Update & Versioning Fixes - v14.3.3 links, app version sync, startup reliability improvements	Superseded by v14.6.0
v14.3.2	Feb 22, 2026	Stability & SSL Fixes - CertsView freeze fix, GameSense proxy, Sentinel agent improvements	Superseded by v14.6.0
v14.3.1	Feb 15, 2026	Phase 22.5: UX Polish & Safety - prune previews, search boxes, context menus, enhanced confirmations, bug fixes	Superseded by v14.6.0
v14.2.1	Feb 12, 2026	Token Rewards & Admin: referral system, token wallet, 30-day feature unlocks, admin roles, HTTP/2 fix	Superseded by v14.6.0
v14.1.0	Feb 12, 2026	Full Nginx support - rate limiting, caching, load balancing, HTTP/2, access control, Reload button	Superseded by v14.6.0
v14.0.0	Feb 12, 2026	Plugin Marketplace (20 plugins), REST API v2.0, Cluster Management, 21 views	Superseded by v14.6.0
v11.6.1	Feb 11, 2026	Monetization & Licensing — Stripe, License API, PostgreSQL view	Superseded by v14.6.0

The Portable DevSecOps Control Plane for Modern Web Apps

Everything You Need

TLS Termination & Reverse Proxy

App Runner & Sub-Processes

Secure Project Import (Drag & Drop Deploy)

AI Runtime Manager, Knowledge Base & Operator Assistant

Docker & PostgreSQL

SentinelAI Integration

OWASP Compliance Dashboard

Web Application Firewall (WAF)

Security Scanner

Secrets Vault Pro

Compliance Reporting

Zero Trust Security

Security Center & Process Reputation

Monitoring & Observability

Team Collaboration

Production Ready

Integrations & Extensibility

Advanced Features

Portable PostgreSQL

SSL Certificate Manager

Plugin Marketplace

Cluster Management

Node Control (Secure Remote Execution)

Remote Access Manager (Self-Hosted RustDesk)

Fleet Management

Licensing & Monetization

Logs & Diagnostics

How It Works

Download & Unzip

Launch ProxyStack

Add Your Sites

Start Apache

25 Sidebar Views

Dashboard

Sites

Apps

PostgreSQL

Docker

Certificates

Monitor

Security

Compliance (OWASP)

Web Application Firewall

Security Scanner

Secrets Vault

Compliance Reports Pro

Zero Trust Enterprise

SentinelAI Pro

Team Pro

Observability Pro

Advanced

Cluster Enterprise

Security Center Enterprise

Remote Access

AI Runtime

Fleet

Logs

Settings

Download ProxyStack

Full Edition Windows GUI

Lite Edition Windows GUI

Cross-Platform CLI — 33 Commands, 5 Platforms

Linux x64 v{{VERSION}}

Linux ARM64 v{{VERSION}}

Windows x64 v{{VERSION}}

macOS x64 (Intel) v{{VERSION}}

macOS ARM64 (Apple Silicon) v{{VERSION}}

SentinelAI Security Agent

Linux x64 Agent v2.0.0

Windows x64 Agent v2.0.0

VirusTotal Scan Results

ProxyStackGUI.exe

ProxyStackGUI.dll

ProxyStackUpdater.exe

System Requirements

Stay Updated

Changelog

v{{VERSION}} - Fleet Management: Unified Device View and a Real Interactive Terminal/File Manager